Overview

overview

10

Static

static

3

3bd80422de...10.exe

windows7-x64

10

3bd80422de...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bd80422de8732c1bfe554418c15bcf728532d23af9f4a1d0076985711740510

  • Size

    44KB

  • Sample

    240522-zgsgwafg7y

  • MD5

    9cc293fe2fc1b5592495b7b66ab15532

  • SHA1

    49f27d6f0c67434d3d0b05fdc56e571015fec925

  • SHA256

    3bd80422de8732c1bfe554418c15bcf728532d23af9f4a1d0076985711740510

  • SHA512

    5a412e96fdcafcb893de4e5655325d2b521761d4746c9cfd0b459afeeff4f26219ab2dd1a0d870357fec8eb11712b40c756b58cbaae0aedb1556c6855d0f78d8

  • SSDEEP

    768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQv/+G:RUNHFKQbIkHvGkAu+G

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      3bd80422de8732c1bfe554418c15bcf728532d23af9f4a1d0076985711740510

    • Size

      44KB

    • MD5

      9cc293fe2fc1b5592495b7b66ab15532

    • SHA1

      49f27d6f0c67434d3d0b05fdc56e571015fec925

    • SHA256

      3bd80422de8732c1bfe554418c15bcf728532d23af9f4a1d0076985711740510

    • SHA512

      5a412e96fdcafcb893de4e5655325d2b521761d4746c9cfd0b459afeeff4f26219ab2dd1a0d870357fec8eb11712b40c756b58cbaae0aedb1556c6855d0f78d8

    • SSDEEP

      768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQv/+G:RUNHFKQbIkHvGkAu+G

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks